Traffic Trace Info


DumpFile: 200612151400.dump
FileSize: 382.81MB
Id: 200612151400
StartTime: Fri Dec 15 14:00:00 2006
EndTime: Fri Dec 15 14:04:38 2006
TotalTime: 278.04 seconds
TotalCapSize: 300.12MB CapLen: 96 bytes
# of packets: 5418294 (3865.33MB)
AvgRate: 116.61Mbps stddev:10.46M

IP flow (unique src/dst pair) Information

# of flows: 174669 (avg. 31.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.9% 1.4% 1.4% 1.4% 1.4% 1.4% 1.2% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 97055
Top 10 bandwidth usage (bytes/total in %):
7.9% 6.1% 5.4% 4.9% 4.8% 4.2% 3.6% 2.9% 2.5% 2.3%
# of IPv6 addresses: 996
Top 10 bandwidth usage (bytes/total in %):
38.7% 38.7% 9.6% 8.7% 4.9% 4.5% 4.5% 4.0% 3.1% 2.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    1074073
 [   64-  127]:    1426039
 [  128-  255]:     143723
 [  256-  511]:     131949
 [  512- 1023]:     157133
 [ 1024- 2047]:    2485377


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total          5418294 (100.00%)       4053091851 (100.00%)    748.04
 ip             5390210 ( 99.48%)       4046594430 ( 99.84%)    750.73
  tcp           4682013 ( 86.41%)       3936062705 ( 97.11%)    840.68
   http(s)      2258751 ( 41.69%)       2997882993 ( 73.97%)   1327.23
   http(c)      1189118 ( 21.95%)        164668817 (  4.06%)    138.48
   squid          77222 (  1.43%)         68014057 (  1.68%)    880.76
   smtp           97626 (  1.80%)         27648764 (  0.68%)    283.21
   nntp            3848 (  0.07%)          1906483 (  0.05%)    495.45
   ftp             5885 (  0.11%)          1800570 (  0.04%)    305.96
   pop3            2575 (  0.05%)           976381 (  0.02%)    379.18
   imap             849 (  0.02%)           236343 (  0.01%)    278.38
   telnet           163 (  0.00%)            17961 (  0.00%)    110.19
   ssh           128605 (  2.37%)         16897732 (  0.42%)    131.39
   dns              922 (  0.02%)           215358 (  0.01%)    233.58
   bgp              464 (  0.01%)            57402 (  0.00%)    123.71
   napster           15 (  0.00%)             1077 (  0.00%)     71.80
   realaud          210 (  0.00%)            64194 (  0.00%)    305.69
   rtsp           30114 (  0.56%)          2250242 (  0.06%)     74.72
   icecast        10253 (  0.19%)          5111371 (  0.13%)    498.52
   hotline           12 (  0.00%)             1533 (  0.00%)    127.75
   other         875378 ( 16.16%)        648311247 ( 16.00%)    740.61
  udp            533184 (  9.84%)         81049221 (  2.00%)    152.01
   dns           459644 (  8.48%)         55315509 (  1.36%)    120.34
   realaud         8021 (  0.15%)          4638559 (  0.11%)    578.30
   halflif            4 (  0.00%)              332 (  0.00%)     83.00
   starcra            1 (  0.00%)               86 (  0.00%)     86.00
   everque            9 (  0.00%)              893 (  0.00%)     99.22
   unreal             3 (  0.00%)              314 (  0.00%)    104.67
   quake           4792 (  0.09%)          3123392 (  0.08%)    651.79
   cuseeme            1 (  0.00%)               76 (  0.00%)     76.00
   other          60700 (  1.12%)         17966948 (  0.44%)    296.00
  icmp            97497 (  1.80%)          8850915 (  0.22%)     90.78
  ipsec              23 (  0.00%)             3650 (  0.00%)    158.70
  ip6               136 (  0.00%)            15428 (  0.00%)    113.44
  other           77357 (  1.43%)         20612511 (  0.51%)    266.46
  frag               99 (  0.00%)            82739 (  0.00%)    835.75
 ip6              28084 (  0.52%)          6497421 (  0.16%)    231.36
  tcp6             8397 (  0.15%)          1404766 (  0.03%)    167.29
   http(s)          475 (  0.01%)           452096 (  0.01%)    951.78
   http(c)         6247 (  0.12%)           699392 (  0.02%)    111.96
   smtp              17 (  0.00%)             8126 (  0.00%)    478.00
   ftp              538 (  0.01%)            50661 (  0.00%)     94.17
   ssh              163 (  0.00%)            34066 (  0.00%)    208.99
   bgp               36 (  0.00%)             3726 (  0.00%)    103.50
   other            921 (  0.02%)           156699 (  0.00%)    170.14
  udp6            15171 (  0.28%)          2236441 (  0.06%)    147.42
   dns            15135 (  0.28%)          2233129 (  0.06%)    147.55
   other             36 (  0.00%)             3312 (  0.00%)     92.00
  icmp6            2727 (  0.05%)           461292 (  0.01%)    169.16
  ip6               111 (  0.00%)            17292 (  0.00%)    155.78
  pim6               14 (  0.00%)             1724 (  0.00%)    123.14
  other6           1664 (  0.03%)          2375906 (  0.06%)   1427.83


tcpdump file: 200612151400.dump.gz (140.34 MB)